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Detailed Description Text - DETX (87) : 

Behavioral integrity refers to the integrity in what 
repositories do. What 

repositories do is determined by the software that they 
execute. The integrity 

of the software is generally assured only by knowledge of 
its source. 

Restated, a user will trust software purchased at a 

reputable computer store 

but not trust software obtained off a random (insecure) 
server on a network. 

Behavioral integrity is maintained by requiring that 
repository software be 

certified and be distributed with proof of such 
certification, i.e. a digital 

certificate. The purpose of the certificate is to 
authenticate that the 

software has been tested by an authorized organization, 
which attests that the 

software does what it is supposed to do and that it does 
not compromise the 

behavioral integrity of a repository. If the digital 
certificate cannot be 

found in the digital work or the master repository which 
generated the 

certificate is not known to the repository receiving the 
software, then the 


software cannot be installed. 


Detailed Description Text - DETX (107) : 

At a minimum, the user interface must permit a user to 
input information 

such as access requests and alpha numeric data and provide 
feedback as to 

transaction status. The user interface will then cause the 
repository to 

initiate the suitable transactions to service the request. 
Other facets of a 

particular user interface will depend on the functionality 
that a repository 
will provide. 


Detailed Description Text - DETX (192) : 

Grammar element 1523 
"Call-For-Price-Spec : =Call-For-Price" is similar to a 
"Best-Price-Spec" in that it is intended to accommodate 
cases where prices are 

dynamic. A Call-For-Price Spec requires a communication 
with a dealer to 

determine the price. This option cannot be exercised if 
the repository cannot 

communicate with a dealer at the time that the right is 
exercised. It is based 

on a secure transaction whereby the dealer names a price to 
exercise the right 

and passes along a deal certificate which is referenced or 
included in the 
billing process. 


Detailed Description Text - DETX (412) : 

The requester decrypts the software using the key from 
the certificate and 

computes a check code on it using a 1-way hash function. 
If the check -code 

does not match the tamper-checking code from the 
certificate, the installation 

transaction ends with an error. (This step assures that 
the contents of the 

software, including the various scripts, have not been 
tampered with. ) 


Detailed Description Text - DETX (423) : 

The requester decrypts the software using the key from 
the certificate and 

computes a check code on it using a 1-way hash function. 
If the check -code 

does not match the tamper-checking code from the 
certificate, the installation 

transaction ends with an error. (This step assures that 
the contents of the 

software, including the various scripts, have not been 
tampered with.) 

Detailed Description Text - DETX (514) : 

In the simplest scenario, when a user wants to print a 
digital document he 

issues a print command to the user interface. If the 
document has the 

appropriate rights and the conditions are satisfied, the 
user agrees to the fee 

and the document is printed. In other cases, the printer 
may be on a remote 

repository and it is convenient to spool the printing to a 
later time. This 

leads to several issues. The user requesting the printing 
wants to be sure 

that he is not billed for the printing until the document 
is actually printed. 

Restated, if he is billed at the time the print job is 
spooled but the job is 

canceled before printing is done, he does not want to pay. 
Another issue is 

that when spooling is permitted, there are now two times at 
which rights, 

conditions and fees could be checked: the time at which a 
print job is spooled 

and the time at which a print is made. As with all usage 
rights, it is 

possible to have rights that expire and to have rights 
whose fee depends on 

various conditions. What is needed is a means to check 
rights and conditions 

at the time that printing is actually done. 


Claims Text 


- CLTX (46) 



24. The computer based system for controlling 
distribution and use of 

digital works as recited in claim 23 wherein said access 
condition specifies an 

authorization certificate that must be present before an 
associated right may 

be exercised and each of said plurality of repositories is 
further comprised of 

an authorization server for checking authorization 
certificates . 


